Collaborate Disseminate
I’am trying to get a feel for Elliptic Curve Cryptography. I wrote a small Python program below to generate key material but I don’t get the same result for y_squared and Q.y^2. I’am using the parameters from 256-Bit Random ECP Group (RFC … Continue reading Elliptic Curve Cryptography Key Verification fails [migrated]
I’m trying to decrypt an encrypted ECDSA_secp256k1 private key generated using the OpenSSL CLI command openssl ecparam -genkey -name secp256k1 | openssl ec -aes-128-cbc -out ecdsa_priv.pem but I want to do it using pure Javascript. I tried… Continue reading How to decrypt ECDSA_secp256k1 private key from PEM format generated with OpenSSL
In TLS 1.3 (RFC8446), there are many secrets and keys. As far as I’ve understood, every certificate (usually only the server) has a long term key associated with it which is used with HKDF to generate a temporary key for the certificate ve… Continue reading Permanent Keys/Secrets in TLS 1.3
In a recent ssh -vv output, I saw OpenSSH mentioning a private key file id_xmss.
XMSS is defined in RFC 8391, "XMSS: eXtended Merkle Signature Scheme", May 2018.
OpenSSH has experimental support for XMSS since version 7.7 (2018-0… Continue reading SSH XMSS keypair generation and best practices
In a recent ssh -vv output, I saw OpenSSH mentioning a private key file id_xmss.
XMSS is defined in RFC 8391, "XMSS: eXtended Merkle Signature Scheme", May 2018.
OpenSSH has experimental support for XMSS since version 7.7 (2018-0… Continue reading SSH XMSS keypair generation and best practices
If using asymmetric encryption, such as ES256, is there a reason why a private key could not be discarded after signing some data?
For example with a JWT, or a file hash use for audit at a later date, is keeping the private key necessary? … Continue reading Key management: Can I delete private key in asymmetric encryption?
I know that both algorithms are similar to the Diffie-Hellman key exchange and are used for exchanging secret keys in a group but I still cannot figure out the key differences between both algorithms.
Is the difference only in the number o… Continue reading Explanation of Burmester-Desmedt group key exchange and Ingemarsson-Tang-Wong (ITW) group key exchange algorithm [migrated]
Lets say Alice and Bob have a secret key k1. This key is 50 chars long and is cryptographically random. Alice generates a cryptographically random string (e.g. 16 chars long) and hashes this string and k1 with an algorithm like pbkfd2 or s… Continue reading Hashing a secret key with a random string to generate a new key
I’m using aes-256-gcm encryption. I used a sample key provided in the docs and it works fine.
I also tried a key generated from here and it works fine. There’s no option to specify gcm here yet the key generated works fine.
I’m trying to g… Continue reading Generate AES-256-GCM key
So far I can do the following. But I have no idea if it is working because I can’t see the keys. I am planning on extracting them into a char array and storing them In a struct. So I need the full encoded byte array for the private and pub… Continue reading How to generate and hex encode a ED25519 keypair using openssl 3.0 c++ [migrated]